Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GubMK2zYInsV0mMOlofh1FU3nKE.roa
File: GubMK2zYInsV0mMOlofh1FU3nKE.roa (raw, json)
Hash identifier: 0gX5+Maa0eEVz4En7J3rwZRAYvQygyD+3psCuFIk5jo=
Subject key identifier: 1A:E6:CC:2B:6C:D8:22:7B:15:D2:63:0E:96:87:E1:D4:55:37:9C:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0BFBF1C01CCE751533DD70507008BB2F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GubMK2zYInsV0mMOlofh1FU3nKE.roa
Signing time: Sun 20 Sep 2026 16:56:07 +0000
ROA not before: Sun 20 Sep 2026 16:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.82.0/24 maxlen: 32
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.159.0/24 maxlen: 32
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Sep 2026 04:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:bf:1c:01:cc:e7:51:53:3d:d7:05:07:00:8b:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 20 16:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ae6cc2b6cd8227b15d2630e9687e1d455379ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:97:0e:13:da:8d:26:9f:76:0b:0e:b0:98:
e9:f0:65:f3:2a:11:84:ab:bb:14:74:a5:c9:83:0d:
d5:71:ed:bd:85:66:f6:16:f3:22:f7:88:28:14:5f:
ad:ab:61:42:57:f4:b9:17:45:81:df:f8:46:94:a1:
be:f2:51:f5:05:b2:01:e3:2b:2a:32:b1:47:0e:76:
73:5a:ba:d2:90:f8:21:7b:25:2a:b3:d0:ce:00:e6:
47:57:fd:a9:27:18:ab:ec:60:ed:bf:37:80:ab:09:
64:59:a4:b2:d0:3e:54:64:c4:9f:c4:d0:dd:ed:f9:
2d:b4:59:94:c9:1b:9d:61:3c:a7:c4:6e:69:08:94:
94:08:20:fa:07:99:25:ba:55:61:9b:27:47:42:af:
39:b2:71:74:c9:f9:4b:19:b6:b0:c3:c5:ea:ce:5f:
16:75:39:3f:14:02:f7:40:d1:e1:7d:fa:04:9a:f1:
13:1e:9f:73:38:8f:8a:2f:62:42:7c:32:d8:1e:92:
23:9a:37:28:90:49:fb:90:27:ef:62:9a:12:37:a1:
ea:3c:29:cb:46:cc:ba:b0:24:36:4e:5f:e9:ae:09:
f1:e3:04:c1:b4:2f:dd:5d:39:9b:c3:63:b8:32:ac:
30:70:79:c3:56:41:0c:d3:84:e0:ac:29:2e:b0:7e:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:CC:2B:6C:D8:22:7B:15:D2:63:0E:96:87:E1:D4:55:37:9C:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GubMK2zYInsV0mMOlofh1FU3nKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.8.93.0/24
45.66.228.0/24
45.84.222.0/24
45.133.251.0/24
79.110.62.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.82.0/24
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.159.0/24
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1a:7b:94:ec:42:1f:5c:86:9c:e6:d9:b6:3b:6a:10:85:45:
ab:3a:e1:e5:36:46:c9:17:61:39:a7:ad:74:ee:5e:29:2c:d7:
a3:cc:a4:aa:d4:8d:2f:89:07:c0:a7:9d:72:05:60:20:dd:3b:
c5:5f:4f:2f:6c:67:16:d0:b5:dd:c0:89:d5:1b:81:d6:12:c8:
38:44:98:a1:a1:72:ff:c6:f5:9c:ba:10:3b:f2:43:95:9f:de:
1e:a9:86:c3:de:5c:a7:66:78:4e:8c:c2:c0:d2:fe:c9:d3:52:
87:28:88:73:7d:54:fe:1b:3c:28:6d:05:56:ed:f0:b6:88:b8:
5c:f8:e6:7c:b1:33:f0:f2:9e:81:41:2e:f1:d5:06:ff:cf:de:
23:4c:7a:8f:11:23:d7:32:e2:33:ff:cb:bc:76:77:d4:8d:ac:
83:63:b6:ca:3b:c8:69:69:2a:1a:18:6a:65:d8:26:a0:5e:fc:
71:0e:1f:8f:e9:7b:6d:95:1f:b6:52:f4:c5:9f:f8:09:8b:20:
98:a8:e5:28:3b:6e:32:e0:6f:2b:9b:49:18:ab:e1:9d:8e:fc:
43:3d:83:aa:ef:f3:0d:aa:ae:c5:86:af:52:0a:e7:f5:9b:7d:
b4:c4:18:1d:15:03:2d:5c:fe:73:98:2e:20:01:f4:fa:4e:2a:
98:7c:fc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:26:54 2026 by rpki-client